<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>供应链 on 老冯云数</title><link>https://vonng.com/tags/%E4%BE%9B%E5%BA%94%E9%93%BE/</link><description>Recent content in 供应链 on 老冯云数</description><generator>Hugo -- gohugo.io</generator><language>zh-cn</language><managingEditor>rh@vonng.com (冯若航)</managingEditor><webMaster>rh@vonng.com (冯若航)</webMaster><copyright>© 2025 冯若航</copyright><lastBuildDate>Sat, 22 Nov 2025 00:00:00 +0000</lastBuildDate><atom:link href="https://vonng.com/tags/%E4%BE%9B%E5%BA%94%E9%93%BE/index.xml" rel="self" type="application/rss+xml"/><item><title>聊聊开源软件供应链信任问题</title><link>https://vonng.com/db/tuna-mirror-site/</link><pubDate>Sat, 22 Nov 2025 00:00:00 +0000</pubDate><author>rh@vonng.com (冯若航)</author><guid>https://vonng.com/db/tuna-mirror-site/</guid><description>在严肃的生产环境里，你不能依赖一个明确说&amp;quot;我不提供任何保证&amp;quot;的上游。当别人告诉你&amp;quot;别指望我&amp;quot;，最好的回应是&amp;quot;那我自己来&amp;quot;。从TUNA镜像站的争议谈开源软件供应链信任问题。</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://vonng.com/db/tuna-mirror-site/featured.jpg"/></item></channel></rss>